@desplega.ai/agent-swarm 1.114.0 → 1.115.0

package/dist/{cli-e2xbxmhd.js → cli-hrhye2rm.js}

@@ -10,19 +10,19 @@ import {
 } from "./cli-ftyf58xj.js";
 import {
   startPricingRefreshLoop
-} from "./cli-w3nq88yc.js";
+} from "./cli-3samkyap.js";
 import {
   seedPricingFromModelsDev
-} from "./cli-k6h2zkw3.js";
+} from "./cli-tece6zgm.js";
 import {
   ensureRbacSeedsSynced,
   getUserGrant
-} from "./cli-7rgh0w0k.js";
+} from "./cli-52fg7s7x.js";
 import {
   can,
   decideAdmission,
   isRbacEnabled
-} from "./cli-0kgcv878.js";
+} from "./cli-86fdnerz.js";
 import {
   createTrackerAgentMapping,
   createTrackerSync,
@@ -37,7 +37,7 @@ import {
   repointTrackerSyncBySwarmId,
   updateTrackerSync,
   updateTrackerSyncSwarmId
-} from "./cli-2t4e4ayk.js";
+} from "./cli-dcca6j8m.js";
 import {
   ZodFirstPartyTypeKind,
   objectType
@@ -47,7 +47,7 @@ import {
   ensure,
   require_dist,
   runScheduleNow
-} from "./cli-q1z5d5ss.js";
+} from "./cli-shvaxw27.js";
 import {
   TriggerSchemaError,
   applyDefinitionPatch,
@@ -61,7 +61,7 @@ import {
   startWorkflowExecution,
   validateDefinition,
   validateJsonSchema
-} from "./cli-a6tzw6vq.js";
+} from "./cli-q1rx7g0d.js";
 import {
   getApiKey
 } from "./cli-f14fvzag.js";
@@ -81,7 +81,7 @@ import {
   setScriptConnectionEnabled,
   upsertCredentialBinding,
   upsertScriptConnection
-} from "./cli-pnfyyp6h.js";
+} from "./cli-r9f6ngrf.js";
 import {
   CANDIDATE_SET_MULTIPLIER,
   computeScore,
@@ -93,7 +93,7 @@ import {
   isGraphExpansionEnabled,
   rerank,
   rowToCandidate
-} from "./cli-byjcad11.js";
+} from "./cli-7xje5amz.js";
 import {
   buildAuthorizationUrl,
   ensureToken,
@@ -101,17 +101,17 @@ import {
   getOAuthApp,
   getOAuthTokens,
   upsertOAuthApp
-} from "./cli-49j095n9.js";
+} from "./cli-t0vqevnm.js";
 import {
   createAdditiveBuffer,
   extractSlackMessageText,
   parseSlackTs
-} from "./cli-5ktc9fd4.js";
+} from "./cli-tffvrh6j.js";
 import {
   getSlackApp,
   startSlackApp,
   stopSlackApp
-} from "./cli-hq39e630.js";
+} from "./cli-pet3aev6.js";
 import {
   findOrCreateUserByEmail,
   findUserByExternalId,
@@ -127,10 +127,10 @@ import {
   resolveIdentityByEmail,
   resolveUserByToken,
   unlinkIdentity
-} from "./cli-113wmegp.js";
+} from "./cli-6aq8xhvm.js";
 import {
   markdownToSlack
-} from "./cli-6xd0bvf8.js";
+} from "./cli-ma04faw5.js";
 import {
   agentContextKey,
   agentmailContextKey,
@@ -138,7 +138,7 @@ import {
   createTaskWithSiblingAwareness,
   githubContextKey,
   linearContextKey
-} from "./cli-312v3c41.js";
+} from "./cli-k3y4z3h5.js";
 import {
   getAppUrl,
   getMcpBaseUrl,
@@ -316,6 +316,7 @@ import {
   installMcpServer,
   installSkill,
   interpolate,
+  isAgentEligibleForTask,
   isReservedConfigKey,
   isTerminalTaskStatus,
   listKv,
@@ -368,7 +369,7 @@ import {
   upsertService,
   upsertSwarmConfig,
   validateConfigValue
-} from "./cli-jzwtn8rm.js";
+} from "./cli-15y7qhzp.js";
 import {
   init_zod
 } from "./cli-bw80ck94.js";
@@ -412,7 +413,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-f5pzfvwb.js";
+} from "./cli-b23axgz4.js";
 import {
   init_secret_scrubber,
   refreshSecretScrubberCache,
@@ -19700,7 +19701,7 @@ async function initOtel(serviceRole = process.env.AGENT_ROLE || "api") {
     return;
   initialized2 = true;
   try {
-    const impl = await import("./otel-impl-yswd0fty.js");
+    const impl = await import("./otel-impl-wbns8hf7.js");
     await impl.boot(serviceRole);
     realWithSpan = impl.withSpan;
     realStartSpan = impl.startSpan;
@@ -27867,6 +27868,7 @@ var registerUpdateScheduleTool = (server) => {
 };
 // src/tools/script-apis.ts
 init_zod();
+init_db();
 init_secret_scrubber();
 
 // src/tools/script-common.ts
@@ -27950,13 +27952,29 @@ function maskToken(endpoint) {
   const { token: _drop, ...rest } = endpoint;
   return { ...rest, token: endpoint.authMode === "bearer" ? "********" : null };
 }
-function errorResult(message) {
+function errorResult(message, status = 400) {
   return {
     isError: true,
     content: [{ type: "text", text: message }],
-    structuredContent: { success: false, status: 400, error: message }
+    structuredContent: { success: false, status, error: message }
   };
 }
+function requireScriptApiPermission(requestInfo, verb, message) {
+  if (!requestInfo.agentId)
+    return errorResult(SCRIPT_TRANSPORT_ERROR);
+  const agent = getAgentById(requestInfo.agentId);
+  const decision = can({
+    principal: {
+      kind: "agent",
+      agentId: requestInfo.agentId,
+      isLead: agent?.isLead ?? false
+    },
+    verb,
+    resource: { kind: "none" },
+    source: "mcp"
+  });
+  return decision.allow ? null : errorResult(message, 403);
+}
 var registerScriptApisTool = (server) => {
   createToolRegistrar(server)("script-apis", {
     title: "Script APIs",
@@ -27977,6 +27995,9 @@ var registerScriptApisTool = (server) => {
       const raw = result.structuredContent?.data;
       let endpoints = (raw?.apis ?? []).map(maskToken);
       if (args.includeSecrets) {
+        const denied = requireScriptApiPermission(requestInfo, "script.api.read.secrets", "Only lead agents can reveal script API bearer tokens.");
+        if (denied)
+          return denied;
         endpoints = await Promise.all(endpoints.map(async (endpoint) => {
           if (endpoint.authMode !== "bearer")
             return endpoint;
@@ -28000,6 +28021,9 @@ var registerScriptApisTool = (server) => {
       };
     }
     if (args.action === "create") {
+      const denied = requireScriptApiPermission(requestInfo, "script.api.create", "Only lead agents can create script API endpoints.");
+      if (denied)
+        return denied;
       const result = await proxyScriptsApi({
         method: "POST",
         path: `/api/scripts/${args.scriptId}/apis`,
@@ -28021,6 +28045,9 @@ var registerScriptApisTool = (server) => {
     if (args.action === "rotate") {
       if (!args.endpointId)
         return errorResult("endpointId is required for rotate.");
+      const denied = requireScriptApiPermission(requestInfo, "script.api.rotate", "Only lead agents can rotate script API bearer tokens.");
+      if (denied)
+        return denied;
       const result = await proxyScriptsApi({
         method: "POST",
         path: `/api/scripts/${args.scriptId}/apis/${args.endpointId}/rotate`,
@@ -28037,6 +28064,9 @@ var registerScriptApisTool = (server) => {
     if (args.action === "update") {
       if (!args.endpointId)
         return errorResult("endpointId is required for update.");
+      const denied = requireScriptApiPermission(requestInfo, "script.api.update", "Only lead agents can update script API endpoints.");
+      if (denied)
+        return denied;
       return proxyScriptsApi({
         method: "PATCH",
         path: `/api/scripts/${args.scriptId}/apis/${args.endpointId}`,
@@ -28048,6 +28078,9 @@ var registerScriptApisTool = (server) => {
     if (args.action === "delete") {
       if (!args.endpointId)
         return errorResult("endpointId is required for delete.");
+      const denied = requireScriptApiPermission(requestInfo, "script.api.delete", "Only lead agents can delete script API endpoints.");
+      if (denied)
+        return denied;
       return proxyScriptsApi({
         method: "DELETE",
         path: `/api/scripts/${args.scriptId}/apis/${args.endpointId}`,
@@ -28631,6 +28664,7 @@ var sendTaskInputSchema = object({
   offerMode: boolean().default(false).describe("If true, offer the task instead of direct assign (agent must accept/reject)."),
   taskType: string().max(50).optional().describe("Task type (e.g., 'bug', 'feature', 'review')."),
   tags: array(string()).optional().describe("Tags for filtering (e.g., ['urgent', 'frontend'])."),
+  requiredCapabilities: array(string()).optional().describe("Capabilities a claiming agent must have (declared via join-swarm/update-profile) to be pool-eligible for this task. Written into the created task's routingAffinity (role is left unset — only enforced when the pool auto-claim/claim-tool paths check it). Most useful when omitting agentId (unassigned pool task); a no-op for a task with an explicit agentId, which bypasses the pool gate entirely."),
   priority: number().int().min(0).max(100).optional().describe("Priority 0-100 (default: 50)."),
   dependsOn: array(uuid()).optional().describe("Task IDs this task depends on."),
   parentTaskId: uuid().optional().describe("Parent task ID for session continuity. Child task will resume the parent's Claude session. Auto-routes to the same worker unless agentId is explicitly provided."),
@@ -28638,7 +28672,7 @@ var sendTaskInputSchema = object({
   vcsRepo: string().optional().describe("VCS repo identifier (e.g., 'desplega-ai/agent-swarm' for GitHub or 'group/project' for GitLab). Links the task to a registered repo for workspace context."),
   model: string().trim().min(1).optional().describe("Concrete model override for this task, interpreted by the assignee's harness/provider. This does not switch providers. Prefer modelTier for portable intent."),
   modelTier: ModelTierSchema.optional().describe("Portable model tier for this task: 'smol', 'regular', 'smart', or 'ultra'. Resolved at claim/run time using the assignee's harness/provider. Legacy model shortnames map as haiku→smol, sonnet→regular, opus→smart, fable→ultra."),
-  effort: ReasoningEffortSchema.optional().describe("Reasoning effort for this task: 'off', 'low', 'medium', 'high', or 'xhigh'. If omitted, the assignee's REASONING_EFFORT_OVERRIDE/default applies."),
+  effort: ReasoningEffortSchema.optional().describe("Reasoning effort for this task: 'off', 'low', 'medium', 'high', 'xhigh', or 'max'. If omitted, the assignee's REASONING_EFFORT_OVERRIDE/default applies."),
   allowDuplicate: boolean().default(false).describe("If true, skip duplicate detection and create the task even if a similar one exists."),
   slackChannelId: string().optional().describe("Slack channel ID to post progress updates to. Use this to propagate Slack context when delegating from a Slack thread."),
   slackThreadTs: string().optional().describe("Slack thread timestamp. Required with slackChannelId for thread-level updates."),
@@ -28675,6 +28709,7 @@ async function sendTaskHandler(ctx, {
   offerMode,
   taskType,
   tags,
+  requiredCapabilities,
   priority,
   dependsOn,
   dir,
@@ -28807,7 +28842,8 @@ async function sendTaskHandler(ctx, {
         slackChannelId,
         slackThreadTs,
         slackUserId,
-        followUpConfig
+        followUpConfig,
+        routingAffinity: requiredCapabilities?.length ? { capabilities: requiredCapabilities } : undefined
       });
       transferTrackerSyncToResumeChild({
         parentTaskId: effectiveParentTaskId,
@@ -32705,17 +32741,18 @@ function enqueueAdmissionRow(input) {
   if (isAuditDisabled())
     return;
   try {
-    const method = (input.method ?? "UNKNOWN").toUpperCase();
+    const isMcp = input.source === "mcp";
+    const method = isMcp ? undefined : (input.method ?? "UNKNOWN").toUpperCase();
     enqueueRow({
       principalType: "user",
       principalId: input.userId,
       originatorUserId: null,
       verb: input.decision.verb ?? "(admission:no-verb)",
-      resourceType: "http-route",
-      resourceId: `${method} ${input.route}`,
+      resourceType: isMcp ? "mcp-tool" : "http-route",
+      resourceId: isMcp ? input.toolName : `${method} ${input.route}`,
       decision: input.decision.allow ? "allow" : "deny",
       reason: input.decision.allow ? null : input.decision.reason,
-      source: "http"
+      source: isMcp ? "mcp" : "http"
     });
   } catch (err) {
     console.warn("[rbac-audit] enqueue failed, dropping admission row:", err.message);
@@ -34801,7 +34838,7 @@ async function notifySlack(text) {
     return;
   }
   try {
-    const { getSlackApp: getSlackApp2 } = await import("./app-bhwdxmvp.js");
+    const { getSlackApp: getSlackApp2 } = await import("./app-4f718yk0.js");
     const app = getSlackApp2();
     if (!app) {
       console.warn("[Jira webhook keepalive] Slack not available, cannot send notification");
@@ -34870,7 +34907,7 @@ async function deleteJiraWebhook(webhookId) {
   console.log(`[Jira webhook keepalive] Deleted webhook id=${webhookId}`);
 }
 async function overwriteWebhookIds(next) {
-  const { getDb: getDb2 } = await import("./db-stn16jp2.js");
+  const { getDb: getDb2 } = await import("./db-p3h2j06x.js");
   const db = getDb2();
   const txn = db.transaction(() => {
     const row = db.query("SELECT metadata FROM oauth_apps WHERE provider = 'jira'").get();
@@ -110022,7 +110059,8 @@ var taskActionInputSchema = object({
   dir: string().min(1).startsWith("/").optional().describe("Working directory (absolute path) for the agent to start in. Only used with 'create' action."),
   model: string().trim().min(1).optional().describe("Concrete model override for the created task, interpreted by the claiming worker's harness/provider. This does not switch providers. Only used with 'create' action."),
   modelTier: ModelTierSchema.optional().describe("Portable model tier for the created task: 'smol', 'regular', 'smart', or 'ultra'. Resolved when a worker claims/runs the task. Only used with 'create' action."),
-  effort: ReasoningEffortSchema.optional().describe("Reasoning effort for the created task: 'off', 'low', 'medium', 'high', or 'xhigh'. Only used with 'create' action.")
+  effort: ReasoningEffortSchema.optional().describe("Reasoning effort for the created task: 'off', 'low', 'medium', 'high', 'xhigh', or 'max'. Only used with 'create' action."),
+  requiredCapabilities: array(string()).optional().describe("Capabilities a claiming agent must have (declared via join-swarm/update-profile) to be pool-eligible for this task. Written into the created task's routingAffinity (role is left unset). Only used with 'create' action.")
 });
 var taskActionOutputSchema = object({
   yourAgentId: string().uuid().optional(),
@@ -110068,7 +110106,19 @@ function taskActionCallResult(result, agentId) {
   };
 }
 async function taskActionHandler(ctx, input) {
-  const { action, task, taskType, tags, priority, dependsOn, taskId, reason, dir, model } = input;
+  const {
+    action,
+    task,
+    taskType,
+    tags,
+    priority,
+    dependsOn,
+    taskId,
+    reason,
+    dir,
+    model,
+    requiredCapabilities
+  } = input;
   const normalizedModel = splitLegacyModelAlias({ model, modelTier: input.modelTier });
   if (ctx.kind === "user") {
     if (action !== "to_backlog" && action !== "from_backlog") {
@@ -110148,7 +110198,8 @@ async function taskActionHandler(ctx, input) {
           dir,
           model: normalizedModel.model,
           modelTier: normalizedModel.modelTier,
-          effort: input.effort
+          effort: input.effort,
+          routingAffinity: requiredCapabilities?.length ? { capabilities: requiredCapabilities } : undefined
         });
         return {
           success: true,
@@ -110185,6 +110236,13 @@ async function taskActionHandler(ctx, input) {
             message: `Task "${taskId}" has unmet dependencies: ${blockedBy.join(", ")}. Cannot claim until dependencies are completed.`
           };
         }
+        const claimingAgent = getAgentById(agentId);
+        if (claimingAgent && !isAgentEligibleForTask(claimingAgent, existingTask)) {
+          return {
+            success: false,
+            message: `Task "${taskId}" requires role "${existingTask.routingAffinity?.role ?? "(unspecified)"}"; yours is "${claimingAgent.role ?? "(unspecified)"}". Cannot claim.`
+          };
+        }
         const claimedTask = claimTask(taskId, agentId);
         if (!claimedTask) {
           return {
@@ -112294,4 +112352,4 @@ function writeSkillsToFilesystem(entries, harnessType = "all", home) {
   return { synced, removed, errors };
 }
 
-export { DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, isJSONRPCRequest, isJSONRPCResultResponse, isJSONRPCErrorResponse, JSONRPCMessageSchema, isInitializeRequest, McpServer, isGitHubEnabled, initGitHub, verifyWebhookSignature, userCtx, isPollTracingEnabled, initOtel, withSpan, startSpan, withSpanContext, withRemoteContext, injectTraceContext, recordSessionCost, createToolRegistrar, cancelTaskInputSchema, cancelTaskOutputSchema, cancelTaskHandler, setCorsHeaders, parseQueryParams, getPathSegments, safeRequestUrlForLog, agentWithCapacity, parseBody, BODY_TOO_LARGE, enforceContentLengthCap, json, jsonError, triggerSchemaErrorResponse, deriveApiBaseUrl, httpServerSemconvAttributes, describeRequestRoute, route, assertSelectOnlyQuery, executeReadOnlyQuery, handleDbQuery, snapshotMetric, snapshotPage, assertOAuthProviderIsNotReserved, assertOAuthAppUrlsSafe, scopedResourceScopeIdSchema, resolveScopedResourceId, getTaskDetailsInputSchema, getTaskDetailsOutputSchema, getTaskDetailsHandler, getTasksInputSchema, getTasksOutputSchema, getTasksHandler, storeLinks, refreshLinks, canReadMemory, getLinksForMemory, recordRetrievals, expandCandidatesWithGraph, markKapsoMessageRead, sendKapsoReaction, getKapsoConfig, getKapsoNumberMapping, markKapsoMessageSeen, resolveTaskAuditUserId, resolveHttpAuditUserId, createEvent, createEventsBatch, getEventCountsFiltered, getEventsFiltered, mergeScheduleTiming, validateRecurringTiming, sendTaskOutputSchema, sendTaskHandler, parseSkillContent, ExplicitSelfDuplicateError, applyRating, shouldPersistAutomaticTaskMemory, isAgentMailEnabled, initAgentMail, verifyAgentMailWebhook, isInboxAllowed, isSenderAllowed, handleMessageReceived, enqueueAuditRow, flushAuditBuffer, startAuditWriter, stopAuditWriter, startAuditGc, stopAuditGc, handlePullRequest, handleIssue, handleComment, handlePullRequestReview, handleCheckRun, handleCheckSuite, handleWorkflowRun, getJiraMetadata, updateJiraMetadata, clearJiraMetadata, registerJiraWebhook, deleteJiraWebhook, isJiraEnabled, initJira, handleJiraWebhook, handleAgentSessionEvent, handleIssueUpdate, handleIssueDelete, handleAgentSessionPrompted, isLinearEnabled, initLinear, loadGlobalConfigsIntoEnv, reloadGlobalConfigsAndIntegrations, scheduleIntegrationsReload, handleCore, canClaim, emitBudgetRefusalSideEffects, taskActionInputSchema, taskActionOutputSchema, taskActionHandler, hasCapability, getEnabledCapabilities, createServer, writeSkillsToFilesystem };
+export { DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, isJSONRPCRequest, isJSONRPCResultResponse, isJSONRPCErrorResponse, JSONRPCMessageSchema, isInitializeRequest, McpServer, isGitHubEnabled, initGitHub, verifyWebhookSignature, userCtx, isPollTracingEnabled, initOtel, withSpan, startSpan, withSpanContext, withRemoteContext, injectTraceContext, recordSessionCost, createToolRegistrar, cancelTaskInputSchema, cancelTaskOutputSchema, cancelTaskHandler, setCorsHeaders, parseQueryParams, getPathSegments, safeRequestUrlForLog, agentWithCapacity, parseBody, BODY_TOO_LARGE, enforceContentLengthCap, json, jsonError, triggerSchemaErrorResponse, deriveApiBaseUrl, httpServerSemconvAttributes, describeRequestRoute, route, assertSelectOnlyQuery, executeReadOnlyQuery, handleDbQuery, snapshotMetric, snapshotPage, assertOAuthProviderIsNotReserved, assertOAuthAppUrlsSafe, scopedResourceScopeIdSchema, resolveScopedResourceId, getTaskDetailsInputSchema, getTaskDetailsOutputSchema, getTaskDetailsHandler, getTasksInputSchema, getTasksOutputSchema, getTasksHandler, storeLinks, refreshLinks, canReadMemory, getLinksForMemory, recordRetrievals, expandCandidatesWithGraph, markKapsoMessageRead, sendKapsoReaction, getKapsoConfig, getKapsoNumberMapping, markKapsoMessageSeen, resolveTaskAuditUserId, resolveHttpAuditUserId, createEvent, createEventsBatch, getEventCountsFiltered, getEventsFiltered, mergeScheduleTiming, validateRecurringTiming, sendTaskOutputSchema, sendTaskHandler, parseSkillContent, ExplicitSelfDuplicateError, applyRating, shouldPersistAutomaticTaskMemory, isAgentMailEnabled, initAgentMail, verifyAgentMailWebhook, isInboxAllowed, isSenderAllowed, handleMessageReceived, enqueueAuditRow, enqueueAdmissionRow, flushAuditBuffer, startAuditWriter, stopAuditWriter, startAuditGc, stopAuditGc, handlePullRequest, handleIssue, handleComment, handlePullRequestReview, handleCheckRun, handleCheckSuite, handleWorkflowRun, getJiraMetadata, updateJiraMetadata, clearJiraMetadata, registerJiraWebhook, deleteJiraWebhook, isJiraEnabled, initJira, handleJiraWebhook, handleAgentSessionEvent, handleIssueUpdate, handleIssueDelete, handleAgentSessionPrompted, isLinearEnabled, initLinear, loadGlobalConfigsIntoEnv, reloadGlobalConfigsAndIntegrations, scheduleIntegrationsReload, handleCore, canClaim, emitBudgetRefusalSideEffects, taskActionInputSchema, taskActionOutputSchema, taskActionHandler, hasCapability, getEnabledCapabilities, createServer, writeSkillsToFilesystem };

package/dist/{cli-312v3c41.js → cli-k3y4z3h5.js}

@@ -3,7 +3,7 @@ import {
   getAgentById,
   getInProgressTasksByContextKey,
   init_db
-} from "./cli-jzwtn8rm.js";
+} from "./cli-15y7qhzp.js";
 
 // src/tasks/context-key.ts
 var SEPARATOR = ":";

package/dist/{cli-6xd0bvf8.js → cli-ma04faw5.js}

@@ -294,4 +294,4 @@ function buildTreeBlocks(roots) {
   return blocks;
 }
 
-export { getTaskLink, markdownToSlack, formatAttachmentsBlockForSlack, formatDuration, buildCompletedBlocks, buildCompletedBlockBatches, buildFailedBlocks, buildProgressBlocks, buildCancelledBlocks, buildBufferFlushBlocks, buildTreeBlocks };
+export { getTaskLink, markdownToSlack, splitSlackSectionText, formatAttachmentsBlockForSlack, formatDuration, buildCompletedBlocks, buildCompletedBlockBatches, buildFailedBlocks, buildProgressBlocks, buildCancelledBlocks, buildBufferFlushBlocks, buildTreeBlocks };

package/dist/{cli-ggy8c7tk.js → cli-mnbgv3w7.js}

@@ -19,7 +19,7 @@ import {
 } from "./cli-tghre7g6.js";
 import {
   applyReasoningEffort
-} from "./cli-tkmm5nf9.js";
+} from "./cli-e61fs2hp.js";
 import {
   init_credentials,
   validateClaudeCredentials

package/dist/{cli-hq39e630.js → cli-pet3aev6.js}

@@ -14,8 +14,10 @@ import {
   buildTreeBlocks,
   formatAttachmentsBlockForSlack,
   formatDuration,
-  markdownToSlack
-} from "./cli-6xd0bvf8.js";
+  getTaskLink,
+  markdownToSlack,
+  splitSlackSectionText
+} from "./cli-ma04faw5.js";
 import {
   getAgentById,
   getChildTasks,
@@ -25,7 +27,7 @@ import {
   getTaskById,
   init_db,
   setSlackMessageTracking
-} from "./cli-jzwtn8rm.js";
+} from "./cli-15y7qhzp.js";
 import {
   require_receiver,
   require_sender,
@@ -54212,9 +54214,89 @@ function classifySlackUpdateError(error) {
   return "failed";
 }
 var isDev = process.env.ENV === "development";
+var MIN_INLINE_OUTPUT_LENGTH = 20;
+var MAX_INLINE_OUTPUT_MESSAGE_LENGTH = 4000;
+var INLINE_OUTPUT_FALLBACKS = new Set([
+  "done",
+  "completed",
+  "complete",
+  "task completed",
+  "process completed successfully",
+  "process completed successfully (no output captured)"
+]);
 function getAgentDisplayName(agent) {
   return isDev ? `(dev) ${agent.name}` : agent.name;
 }
+function shouldPostInlineCompletionOutput(task, attachments) {
+  if (task.status !== "completed")
+    return false;
+  if (!task.slackChannelId || !task.slackThreadTs)
+    return false;
+  if (task.slackReplySent)
+    return false;
+  const output = task.output?.trim();
+  if (!output || output.length < MIN_INLINE_OUTPUT_LENGTH)
+    return false;
+  if (INLINE_OUTPUT_FALLBACKS.has(output.toLowerCase()))
+    return false;
+  return !attachments.some((attachment) => attachment.isPrimary);
+}
+function formatInlineCompletionOutputText(opts) {
+  const header = `✅ *${opts.agentName}* completed with output (${getTaskLink(opts.taskId)}):
+
+`;
+  const tail = `
+
+…(full output in task ${getTaskLink(opts.taskId)})`;
+  const slackOutput = markdownToSlack(opts.output.trim());
+  const maxBodyLength = MAX_INLINE_OUTPUT_MESSAGE_LENGTH - header.length;
+  if (slackOutput.length <= maxBodyLength) {
+    return header + slackOutput;
+  }
+  const maxTruncatedBodyLength = Math.max(0, maxBodyLength - tail.length);
+  let cut = slackOutput.lastIndexOf(`
+`, maxTruncatedBodyLength);
+  if (cut < maxTruncatedBodyLength / 2) {
+    cut = slackOutput.lastIndexOf(" ", maxTruncatedBodyLength);
+  }
+  if (cut < maxTruncatedBodyLength / 2) {
+    cut = maxTruncatedBodyLength;
+  }
+  return header + slackOutput.slice(0, cut).trimEnd() + tail;
+}
+async function sendInlineTaskOutput(task) {
+  const app = getSlackApp();
+  if (!app || !task.slackChannelId || !task.slackThreadTs || !task.agentId || !task.output) {
+    return false;
+  }
+  const agent = getAgentById(task.agentId);
+  if (!agent) {
+    console.error(`[Slack] Agent not found for task ${task.id}`);
+    return false;
+  }
+  const text = formatInlineCompletionOutputText({
+    agentName: agent.name,
+    taskId: task.id,
+    output: task.output
+  });
+  try {
+    await sendWithPersona(app.client, {
+      channel: task.slackChannelId,
+      thread_ts: task.slackThreadTs,
+      text,
+      username: getAgentDisplayName(agent),
+      icon_emoji: getAgentEmoji(agent),
+      blocks: splitSlackSectionText(text).map((chunk) => ({
+        type: "section",
+        text: { type: "mrkdwn", text: chunk }
+      }))
+    });
+    return true;
+  } catch (error) {
+    console.error(`[Slack] Failed to send inline output for task ${task.id}:`, error);
+    return false;
+  }
+}
 async function sendTaskResponse(task) {
   const app = getSlackApp();
   if (!app || !task.slackChannelId || !task.slackThreadTs) {
@@ -54904,7 +54986,8 @@ function startTaskWatcher(intervalMs = 3000) {
         if (lastSent && now2 - lastSent < MIN_SEND_INTERVAL)
           continue;
         if (taskToTree.has(task.id)) {
-          if (task.status !== "completed" || task.slackReplySent) {
+          const attachments = task.status === "completed" ? getTaskAttachments(task.id) : [];
+          if (!shouldPostInlineCompletionOutput(task, attachments)) {
             notifiedCompletions.set(task.id, now2);
             continue;
           }
@@ -54912,8 +54995,10 @@ function startTaskWatcher(intervalMs = 3000) {
           notifiedCompletions.set(task.id, now2);
           lastSendTime.set(completionKey, now2);
           try {
-            await sendTaskResponse(task);
-            console.log(`[Slack] Sent full tree-tracked completion for task ${task.id.slice(0, 8)}`);
+            const sent = await sendInlineTaskOutput(task);
+            if (!sent)
+              throw new Error("sendInlineTaskOutput returned false");
+            console.log(`[Slack] Sent inline output for tree-tracked completion ${task.id.slice(0, 8)}`);
           } catch (error) {
             notifiedCompletions.delete(task.id);
             lastSendTime.delete(completionKey);
@@ -54988,13 +55073,13 @@ async function initSlackApp() {
     socketMode: true,
     logLevel: import_bolt.LogLevel.DEBUG
   });
-  const { registerMessageHandler } = await import("./handlers-gshprvpf.js");
-  const { registerCommandHandler } = await import("./commands-zk4d6esf.js");
-  const { registerActionHandlers } = await import("./actions-bm8vdxys.js");
+  const { registerMessageHandler } = await import("./handlers-9er4zx9q.js");
+  const { registerCommandHandler } = await import("./commands-hch4e2k1.js");
+  const { registerActionHandlers } = await import("./actions-17ya5wde.js");
   registerMessageHandler(app);
   registerCommandHandler(app);
   registerActionHandlers(app);
-  const { createAssistant } = await import("./assistant-15mp2apr.js");
+  const { createAssistant } = await import("./assistant-ah7csnjz.js");
   app.assistant(createAssistant());
   return app;
 }

package/dist/{cli-a6tzw6vq.js → cli-q1rx7g0d.js}

@@ -11,18 +11,18 @@ import {
   getScriptVersion,
   listRelationalCredentialBindings,
   validateScriptImports
-} from "./cli-pnfyyp6h.js";
+} from "./cli-r9f6ngrf.js";
 import {
   ensureTokenOrThrow,
   getOAuthApp,
   getOAuthTokens,
   isTokenExpiringSoon,
   oauthAppRowToProviderConfig
-} from "./cli-49j095n9.js";
+} from "./cli-t0vqevnm.js";
 import {
   withSiblingAwareness,
   workflowContextKey
-} from "./cli-312v3c41.js";
+} from "./cli-k3y4z3h5.js";
 import {
   getAppUrl
 } from "./cli-dh55d5fg.js";
@@ -71,7 +71,7 @@ import {
   telemetry,
   updateWorkflowRun,
   updateWorkflowRunStep
-} from "./cli-jzwtn8rm.js";
+} from "./cli-15y7qhzp.js";
 import {
   init_zod
 } from "./cli-bw80ck94.js";
@@ -2612,7 +2612,7 @@ class HumanInTheLoopExecutor extends BaseExecutor {
       }
       if (notification.channel === "slack") {
         try {
-          const { getSlackApp } = await import("./app-bhwdxmvp.js");
+          const { getSlackApp } = await import("./app-4f718yk0.js");
           const slackApp = getSlackApp();
           if (!slackApp) {
             console.warn("[HITL] Slack not initialized — cannot send notification");
@@ -2726,7 +2726,7 @@ class NotifyExecutor extends BaseExecutor {
         }
       }
       case "slack": {
-        const { getSlackApp } = await import("./app-bhwdxmvp.js");
+        const { getSlackApp } = await import("./app-4f718yk0.js");
         const app = getSlackApp();
         if (!app) {
           return {

package/dist/{cli-pnfyyp6h.js → cli-r9f6ngrf.js}

@@ -3,7 +3,7 @@ import {
 } from "./cli-jkhwmmgg.js";
 import {
   embedScript
-} from "./cli-f9n2jg31.js";
+} from "./cli-cmw9rzy5.js";
 import {
   calculatePKCECodeChallenge,
   generateRandomCodeVerifier,
@@ -22,7 +22,7 @@ import {
   init_date_utils,
   init_db,
   normalizeDateRequired
-} from "./cli-jzwtn8rm.js";
+} from "./cli-15y7qhzp.js";
 import {
   init_zod
 } from "./cli-bw80ck94.js";
@@ -169786,7 +169786,10 @@ function buildGeneratedArtifacts(input) {
   const generatedTypes = [
     types,
     `export interface ${pascal(slug)}Api {`,
-    ...operations.map((operation) => `  ${operation.name}(args: ${operation.requestType}): Promise<${operation.responseType}>;`),
+    ...operations.flatMap((operation) => [
+      `  ${operation.name}(args: ${operation.requestType}): Promise<${operation.responseType}>;`,
+      `  ${operation.name}(args: ${operation.requestType}, options: ScriptApiRawOptions): Promise<ScriptApiRawResult>;`
+    ]),
     "}"
   ].join(`
 `);

package/dist/{cli-q1z5d5ss.js → cli-shvaxw27.js}

@@ -4,16 +4,16 @@ import {
   handleScheduleTrigger,
   runScript,
   startWorkflowExecution
-} from "./cli-a6tzw6vq.js";
+} from "./cli-q1rx7g0d.js";
 import {
   getScript,
   getScriptApiConnectionDescriptors,
   getScriptMcpConnectionDescriptors
-} from "./cli-pnfyyp6h.js";
+} from "./cli-r9f6ngrf.js";
 import {
   createTaskWithSiblingAwareness,
   scheduleContextKey
-} from "./cli-312v3c41.js";
+} from "./cli-k3y4z3h5.js";
 import {
   getDb,
   getDueScheduledTasks,
@@ -23,7 +23,7 @@ import {
   init_telemetry,
   telemetry,
   updateScheduledTask
-} from "./cli-jzwtn8rm.js";
+} from "./cli-15y7qhzp.js";
 import {
   __commonJS,
   __require,

package/dist/{cli-49j095n9.js → cli-t0vqevnm.js}

@@ -8,7 +8,7 @@ import {
   init_date_utils,
   init_db,
   normalizeDateRequired
-} from "./cli-jzwtn8rm.js";
+} from "./cli-15y7qhzp.js";
 
 // src/be/db-queries/oauth.ts
 init_date_utils();